Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce4a44e4-0182-4d58-ab2b-2a1d1d18c02e.roa
File:                     ce4a44e4-0182-4d58-ab2b-2a1d1d18c02e.roa (raw, json)
Hash identifier:          Nrs7YYLIUsOgwfLueQKGfqaH3nNRFlj8u9+fIxYqvP4=
Subject key identifier:   3B:EC:2F:5C:65:13:4A:6B:35:BE:F1:7C:A5:F2:0C:C4:5C:4C:F0:52
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       78CE95E0634D7594205FCD50DC907322C40FDE25
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce4a44e4-0182-4d58-ab2b-2a1d1d18c02e.roa
Signing time:             Fri 08 May 2026 02:21:14 +0000
ROA not before:           Fri 08 May 2026 02:21:14 +0000
ROA not after:            Thu 06 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.170.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ce:95:e0:63:4d:75:94:20:5f:cd:50:dc:90:73:22:c4:0f:de:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May  8 02:21:14 2026 GMT
            Not After : Aug  6 23:59:59 2026 GMT
        Subject: serialNumber=c487c1d55c3f7722a9de2fe4ac35713558acd1c7db2c3f7db29a33fbb6fb9631, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b2:c9:22:88:62:e2:dc:4d:09:a3:22:d4:aa:
                    9e:e1:fb:48:3e:b4:96:08:c6:46:47:06:ac:6e:29:
                    a7:83:4d:96:47:99:61:a9:b5:ab:e3:05:36:36:97:
                    76:50:6e:b5:51:ba:58:63:d0:f1:0a:dd:db:25:b6:
                    2b:40:6d:9f:5e:55:3a:d2:12:a6:53:cc:52:e1:ac:
                    a8:9d:99:f8:24:ef:59:6b:2a:ef:6e:05:f7:82:31:
                    a8:2e:24:a6:0e:a9:d5:a3:84:e7:6d:2a:9c:c4:fd:
                    b7:cd:a8:29:5b:d8:c0:91:1a:39:3d:fd:6b:d8:ef:
                    4a:1e:c2:28:21:44:1c:a9:42:3e:8a:a0:78:bf:7a:
                    b0:09:44:7a:53:84:67:cd:3e:b0:c1:36:9d:5d:83:
                    0d:35:52:ad:62:18:57:90:ed:d9:19:9c:68:a0:c2:
                    f1:d9:4b:0b:64:c4:6a:b1:cd:c7:09:28:6f:69:27:
                    bd:16:ee:36:1a:fc:e6:26:d7:f8:2e:6f:7a:58:0c:
                    44:0b:bc:57:69:d1:3a:ab:2c:fb:d6:0a:77:73:2b:
                    d2:12:18:de:4e:3e:ef:fa:ff:98:94:de:f1:a3:04:
                    0f:5f:fd:2a:18:e0:14:25:33:a9:73:c3:06:a3:14:
                    6b:c6:f0:31:ad:4f:02:da:b4:65:48:ce:a9:84:36:
                    14:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:EC:2F:5C:65:13:4A:6B:35:BE:F1:7C:A5:F2:0C:C4:5C:4C:F0:52
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce4a44e4-0182-4d58-ab2b-2a1d1d18c02e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.170.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         97:5c:bd:10:b6:61:e6:65:8c:71:3f:02:4c:bd:ea:81:6a:78:
         b4:e3:35:79:bb:4b:3a:d7:b8:5e:08:07:d5:89:d2:b6:90:fb:
         b9:bd:90:40:95:42:fa:89:fd:1f:96:92:2c:3f:c0:3e:aa:fd:
         57:12:9c:11:62:40:ab:4f:64:b7:b3:92:10:38:88:27:59:08:
         f8:6e:30:1c:80:de:48:95:a1:c7:62:b1:0f:5b:42:02:41:b5:
         e7:15:24:d9:ad:2e:b7:ad:fb:4d:df:10:ac:a7:df:a4:09:f1:
         f4:2f:1e:28:56:b0:97:49:9c:8f:81:81:30:d0:09:2c:a6:6a:
         6e:4a:5a:30:98:16:c0:98:dd:67:60:00:e9:72:7e:76:74:6a:
         7a:f4:78:62:bd:c0:15:85:e3:c5:a5:cc:6d:8b:7e:45:2f:68:
         73:fc:e6:e2:58:f7:f2:b4:02:6a:85:8f:7b:7f:cc:aa:15:1e:
         43:24:41:9e:6e:37:10:1d:75:39:aa:bd:e0:e8:28:92:5f:e2:
         a6:e4:f9:84:88:a0:56:56:4d:8e:f1:0f:1f:38:c6:d1:73:b9:
         d4:f1:ed:fd:28:7a:8a:6f:3e:26:bf:9d:4c:89:d1:cb:04:b8:
         59:d4:b4:5c:2a:86:9b:13:6d:71:e7:13:92:72:13:75:d8:a2:
         3f:34:1d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:27:18 2026 by rpki-client